Wireshark-users: Re: [Wireshark-users] Router broken or is my Linux crazy? *Smallest* log include

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Andreas Fink <afink@xxxxxxxxxxxxx>
Date: Mon, 10 Mar 2008 22:47:56 +0700

On 10.03.2008, at 18:26, Monkey D. Luffy wrote:
Your computer should gather that 192.168.2.1 is your router's ethernet from the broadcasts it listens to. Thats also a way of learning ARP tables. 
So that means that I have (at least) a problem in my computer? Since
it doesn't learn who the router is from the IGMPs packets:


    86 1403.785840 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    87 1404.785886 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    88 1407.786026 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    89 1408.332413 192.168.2.1           224.0.0.1             IGMP
 V2 Membership Query
    90 1408.586063 192.168.2.100         224.0.0.251           IGMP
 V2 Membership Report
    91 1408.786070 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    92 1409.786118 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    93 1412.493245 192.168.2.1           224.0.0.9             IGMP
 V2 Membership Report
    94 1412.786256 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    95 1413.786301 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    96 1414.786348 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100
    97 1416.138415 192.168.2.100         239.255.67.250        IGMP
 V2 Membership Report
    98 1417.786490 AsustekC_ba:f5:a8     Broadcast             ARP
 Who has 192.168.2.1?  Tell 192.168.2.100



Can there something be wrong with the mask used?


Could be. What is the mask used?


However its odd that the router doesnt answer a specific ARP request
targeted to him.

So that means my router is indeed brain dead.


Now to the tricky questions. Where did you capture this?

I captured it on my computer, 192.168.10.100


192.168.10.100? thats not on the same subnet usually



Maybe the router answered but your computer didnt get the answer
because the switch in the middle is messed up or so?

The cable modem connects to my router. From my router 2 RJ45 cables
connect to 2 computers. Both (Linux) computers fail network connection
at the same time.
I don't use any switch hardware device.

I have to say that when my NIC connects directly to the cable modem
(no router in the middle) I don't have any problems with my network
connection.